Start with built-in controls.

1. Open Settings.
2. Tap Screen Time.
3. Tap Turn On Screen Time if it is not already on.
4. Tap Lock Screen Time Settings or Use Screen Time Passcode.
5. Let the trusted person enter a passcode you do not know, if you are using the self-lockout model.
6. Write down which Apple Account can recover the Screen Time passcode. That recovery path matters.

1. Open Settings -> Screen Time.
2. Tap Content & Privacy Restrictions.
3. Turn Content & Privacy Restrictions on.
4. Tap App Store, Media, Web, & Games. On some versions, tap Content Restrictions instead.
5. Tap Web Content.
6. Choose Limit Adult Websites for the normal adult-content block.
7. Use Only Approved Websites or Allowed Websites Only for whitelist mode.
8. Under Never Allow, add domains that are personally risky for you.
9. Test in Safari, then test in every other browser still installed.

1. Go back to Content & Privacy Restrictions.
2. Open iTunes & App Store Purchases or App Store, Media, Web, & Games, depending on your iOS version.
3. Set Installing Apps to Don't Allow.
4. Set Deleting Apps to Don't Allow if deleting the blocker or browser is a bypass.
5. Set In-app Purchases to Don't Allow if spending or subscriptions are part of the problem.
6. Open Allowed Apps & Features and turn off apps you do not want available.
7. Open Passcode Changes and set it to Don't Allow if shown.
8. Open Account Changes and set it to Don't Allow if shown.
9. Open Cellular Data Changes and set it to Don't Allow if switching networks is part of the bypass.

For serious lockout, Screen Time alone is not enough if you can recover the passcode yourself. Use the Trusted person handoff.

1. Install Google Family Link on the parent or trusted person's device.
2. Sign in with the parent Google Account.
3. On the managed Android phone or tablet, sign in with the supervised Google Account.
4. Follow the prompts to link the device to Family Link.
5. Do not save the parent Google password on the managed device.
6. Remove any second Google Account that can install apps or change settings without approval.

1. On the parent device, open Family Link.
2. Select the supervised account.
3. Tap Controls.
4. Tap Google Chrome or Chrome & Web.
5. Choose Try to block explicit sites for the normal filter.
6. Choose Only allow approved sites for whitelist mode.
7. Add known risky domains to Blocked sites.
8. Turn on SafeSearch for Google Search.
9. Turn on Restricted Mode for YouTube, then test the YouTube app and YouTube in the browser.

Chrome filtering is not the same thing as whole-device filtering. If another browser, VPN, or private DNS setting remains available, add the Android Friction steps.

1. In Family Link, open Controls -> Google Play.
2. Set content restrictions for apps, games, movies, books, and purchases.
3. Require approval for new app installs and purchases.
4. Uninstall extra browsers, VPN apps, proxy apps, and app stores you do not need.
5. Check Settings -> Apps for browsers hidden under unfamiliar names.
6. Open Settings -> Network & internet -> Private DNS and note whether a DNS layer is already set.
7. Test over Wi-Fi and mobile data. A router filter will not protect mobile data.

1. Set up the Chromebook with the account that should be the owner, ideally the trusted person's account for stronger lockout.
2. Add the supervised account that will be used daily.
3. Use Family Link for that supervised account.
4. Do not use the owner account for daily browsing.
5. Do not save the owner or parent password where the daily user can access it.

1. Sign in as the Chromebook owner.
2. Open Settings.
3. Open Security and Privacy.
4. Open Manage other people.
5. Turn off Guest browsing.
6. Turn on Restrict sign-in to the following users if available.
7. Add only the accounts that should be allowed on the device.
8. Sign out and confirm that guest mode is no longer available from the login screen.

1. On the parent or trusted person's device, open Family Link.
2. Select the supervised account.
3. Open Controls -> Google Chrome or Chrome & Web.
4. Choose Try to block explicit sites or Only allow approved sites.
5. Open Site settings and tighten permissions for downloads, pop-ups, extensions, and notifications where available.
6. Test the daily account, then try to sign in as a different account and confirm it is blocked.

For school or organization-grade control, use Chrome Enterprise or another managed-device setup instead of relying only on a personal owner account.

1. Go to account.microsoft.com/family.
2. Sign in with the organizer account.
3. Add the managed Microsoft account as a family member.
4. On the Windows PC, sign in with the managed account.
5. Open Settings -> Accounts -> Family or Family & other users.
6. Confirm the managed account is a Standard User, not an administrator.
7. Use a separate administrator account for setup and recovery.

1. Open the Family Safety dashboard.
2. Select the family member.
3. Open Content filters.
4. Turn on Filter inappropriate websites and searches.
5. Turn on Only use allowed websites if you want whitelist mode.
6. Add personally risky domains to the blocked list.
7. Use Microsoft Edge for the managed account.
8. Set Edge as the default browser.
9. Test the filter in Edge and then test any other installed browser.

Microsoft Family Safety web filtering is Edge-centered. If Chrome, Firefox, Brave, portable browsers, or app stores remain available, add the Windows Friction steps.

1. In Family Safety, open Apps and games.
2. Set age limits and app restrictions.
3. Remove extra browsers from the standard account.
4. Open Settings -> Apps and uninstall browsers or stores you do not need.
5. Keep the Microsoft Store and installer approvals under the organizer or administrator account.
6. Do not type the admin password into prompts while the daily user is watching or recording it.

1. Open System Settings.
2. Click Screen Time.
3. Turn Screen Time on.
4. Click Lock Screen Time Settings or set the Screen Time passcode if your macOS version shows that option.
5. Let the trusted person hold the passcode if this is a self-lockout setup.

1. In System Settings, open Screen Time.
2. Open Content & Privacy.
3. Turn Content & Privacy on.
4. Open App Store, Media, Web, & Games.
5. Set Web Content to Limit Adult Websites.
6. Use Allowed Websites Only if you want whitelist mode.
7. Tighten app, movie, TV, book, and store restrictions where relevant.
8. Open App & Feature Restrictions and turn off apps or features you do not want available.
9. Open Preference Restrictions and prevent changes that would weaken the setup.

1. Open System Settings -> Users & Groups.
2. Create a new standard account for daily use, or convert the daily account to standard after creating a separate admin account.
3. Keep one administrator account for maintenance.
4. Have the trusted person hold the administrator password if you need lockout.
5. Use the standard account for daily browsing and work.
6. Test app installation, browser installation, and Screen Time changes from the standard account.